JURNITI°
Login
Live · provision in ~3 minutes

Real isolation.
Your keys
never leave the box.

Every agent runs in its own Firecracker microVM with a real KVM boundary — not a shared container. Bring your own model keys. From $25/mo with a 30-day money-back.

Firecracker + KVM
Keys stay in your VM
30-day money-back
Contact

Prefer the command line?

Up and running in one line.

$ curl -fsSL https://jurniti.com/install.sh | sh

Or read the docs

Pick your harness

Autonomous agents. Coding agents. One platform.

11 open-source agent runtimes — from Claude Code and Codex to Hermes and OpenClaw — each in its own KVM-isolated microVM with your own keys. Pick one to start; add more later, each in its own VM, billed at its plan's rate.

Autonomous & always-on agents(4)

Coding agents(7)

The problem

Most managed agents are not what they say they are.

The category default for managed AI agents is a Docker container with a friendlier dashboard. That stops being acceptable the moment your agent has the keys.

Docker is not isolation.

Containers share one Linux kernel. Your neighbour's bug becomes your bug. The container escapes are documented, public, and exploited in the wild.

Managed agents see your keys.

Most platforms proxy your model spend through their account. Lock-in by design + vendor markup on every token. You don't own the relationship with your provider.

Setup eats your weekend.

DIY agent infra is renting a box, opening firewall ports, wiring TLS, persistent volumes, systemd units, log forwarding — and then you've earned the right to install Hermes. A managed agent shouldn't ask you to be a sysadmin first.

Features

Hardware isolation. Your keys. Your subdomain.

Multi-tenant nested-virt EC2 in AWS us-west-2. One Firecracker microVM per tenant. Same KVM hardware boundary AWS uses for Lambda.

Real Firecracker microVM

KVM hardware boundary per tenant. The same primitive AWS uses for Lambda. 124ms boot.

Bring your own model key

OpenRouter, OpenAI, Anthropic, Nous Portal. Paste once, lives only inside your VM.

30-day money-back

Cancel within 30 days for a full refund. Manual processing within one business day.

Custom subdomain

you.jurniti.com with valid TLS, ready when the VM boots. Pro and Max plans.

Upstream Hermes

We ship uv and the upstream install script; you control which Hermes version lands.

Persistent volume

/var/lib/jurniti/persist survives restarts and re-provisions. Daily snapshot on Max.

Memory

Agents that remember — without you pasting the past back in.

Most agents wake up empty every session. jurniti Memory is a dedicated microVM that holds long-term knowledge, then plugs into any agent over MCP. The memory stays in your tenant. The agent just gets smarter.

Obsidian logo
Keyless

Obsidian

Markdown notes the agent can read and write. Portable, offline-friendly, zero model key to start.

Keyless

gbrain

A self-wiring knowledge graph. Ingest notes once; the agent gets a second brain that compounds.

mem0 logo
Semantic

mem0

Vector recall that actually finds what happened last week. Add your model key when you're ready for Pro memory.

Buy a memory once. Grant it to one agent or many. Sign in to provision — same Firecracker isolation as your agents, from $19/mo.

Observability

Stop grepping logs. Watch what the agent actually did.

When an agent fails mid-tool-call, the answer is not another SSH session. jurniti Observability is a self-hosted sidecar in its own microVM — Latitude or Langfuse — so sessions, tool calls, and multi-turn paths stay on your tenant. Same isolation model as agents and Memory.

Latitude logo
Self-hosted

Latitude

Agent-native traces, signals, and session trajectories. MIT, OTEL ingest, full UI in your microVM.

Langfuse logo
Self-hosted

Langfuse

The open-source default for LLM observability. Sessions, scores, and datasets — data residency you control.

Not a shared SaaS black box. A sidecar you own.

One observability engine. Many agents. Buy a sidecar, grant it from the agent VM page, and the platform injects OTEL export config — traces stay in your box. Cloud-only vendors stay off the menu on purpose.

After sign-in, open Observability in the dashboard to add an engine, then attach it from any agent — same pattern as Memory.

Quickstart

Three commands. Then your agent is online.

Run inside the microVM you provisioned. We don't pre-install Hermes — you control the version, the upstream installer is one curl away.

you.jurniti.com●
# Boot one tenant microVM
$ hermes config set OPENROUTER_API_KEY sk-or-v1-...
$ hermes dashboard --host 0.0.0.0 --port 9119

# 124ms later …
→ tenant.you.jurniti.com  ·  KVM-isolated
Command line

Install the CLI. Ship in one line.

One binary drives everything — provision, billing, VMs, templates — and doubles as an MCP server for your own agent.

$ curl -fsSL https://jurniti.com/install.sh | sh

Then, three commands to first agent

1. jurniti login

authenticate this machine

2. jurniti billing add-card

attach a payment method

3. jurniti up

provision + boot your agent VM

Read the docsWindows? irm https://jurniti.com/install.ps1 | iex
Pricing

Flat monthly. No metered surprises.

Every plan is the full platform — BYOK, no feature gates. Annual prepay gets 2 months free.

Starter

$21/moinstead of $25/mo at the monthly rate

$250 billed once a year — 2 months free

Solo builders running Pi or Hermes 8B with a local proxy. Just enough to keep your agent's home alive 24/7.

1 vCPU · 2 GiB RAM · 10 GiB SSD · 100 Mbit/s burst

  • Real KVM isolation — your own Firecracker microVM
  • BYOK — your keys never leave the box
  • Public TLS subdomain
  • Persistent home that survives restarts

Pro

Most popular
$41/moinstead of $49/mo at the monthly rate

$490 billed once a year — 2 months free

The default. Headroom for Hermes-3-8B at Q4, OpenClaw with a heavy plugin set, or a Pi instance you actually live in.

2 vCPU · 6 GiB RAM · 50 GiB SSD · 200 Mbit/s burst

  • Everything in Starter, plus
  • Custom subdomain
  • 2× the compute, 5× the disk of Starter

Max

$83/moinstead of $99/mo at the monthly rate

$990 billed once a year — 2 months free

For agents you'd cry about losing. Daily snapshots, room for a 12 GiB working set, and the headroom to keep multiple skills warm.

4 vCPU · 12 GiB RAM · 100 GiB SSD · 500 Mbit/s burst

  • Everything in Pro, plus
  • Daily snapshot
  • 2× the compute, 2× the disk of Pro
30-day money-back guaranteeBYOK — no token markupCancel anytimeLive in ~3 minutes

Don't need always-on? Pay by the hour with prepaid credits.

On-Demand

usage · prepaid credits

Never interrupted while running.

$0.05/hour

Metered per second while running · Starter sizing

Bursty and part-time agents. Run for an afternoon, stop, pay for exactly the hours you used.

  • Starts in seconds when warm capacity is available, otherwise queued — you'll be emailed when it starts.
  • Running 24/7 ≈ $36.50/mo — the $25/mo flat plan is cheaper for always-on.
  • Prepaid credits — $10 minimum top-up, card on file, never charged until you top up
  • Billed per second while running (60-second minimum per run) at Starter sizing (1 vCPU · 2 GiB RAM)
  • Stop anytime — a stopped agent burns nothing
Buy credits — from $10

Spot

usage · prepaid credits

Half the rate — can be interrupted.

$0.025/hour

Metered per second while running · Starter sizing

Interruption-tolerant work — batch runs, experiments, agents that checkpoint their own progress.

  • AWS reclaims can lose up to the last ~10 minutes of unsynced work; jurniti-initiated pauses lose nothing.
  • Pauses gracefully and restores automatically when capacity frees.
  • Prepaid credits — $10 minimum top-up, card on file, never charged until you top up
  • Billed per second while running (60-second minimum per run) at Starter sizing (1 vCPU · 2 GiB RAM)
  • Stop anytime — a stopped agent burns nothing
Buy credits — from $10
FAQ

Questions you should ask before paying anyone.

Why a microVM instead of a Docker container?
Docker shares one Linux kernel across every tenant. A bug in your neighbour's container can become your problem. Firecracker spins up a real KVM-backed virtual machine per tenant with hardware-enforced isolation — the same primitive AWS uses for Lambda.
What does BYOK actually mean here?
Your OpenRouter / OpenAI / Anthropic key lives only inside your VM. We never see it, never proxy, never mark up your spend. You pay your model provider direct.
What does the 30-day guarantee cover?
Cancel your first plan within 30 days for a full refund, no questions asked. The guarantee covers your first subscription and ends once you expand. After that, cancel anytime — your VM keeps running to the end of the period you've paid for, then simply doesn't renew.
Where do my VMs run?
AWS us-west-2 today, on EC2 nested-virtualization hosts — one Firecracker microVM per tenant. Additional regions land when committed regional MRR clears the cost of a second box.
Can I run multiple agents (Hermes + OpenClaw + Pi)?
Yes — each gets its own Firecracker microVM and its own subscription. So Hermes + OpenClaw + Pi at Starter is 3 × $25 = $75/mo. We deliberately don't bundle multiple harnesses inside one VM: it would break the per-tenant hardware-isolation boundary and starve resources at the Starter tier. Pricing is per-VM, so every agent you add is billed at its plan's rate — and annual prepay gives you 2 months free on each.
What are Memory and Observability?
Optional sidecars alongside your agents — same Firecracker isolation, not shared multi-tenant SaaS. Memory engines (Obsidian, gbrain, mem0) are live today: buy one, grant it over MCP, and agent knowledge compounds. Observability engines (Latitude, Langfuse) are the self-hosted trace catalog on the same attach model — sessions and tool calls stay in your microVM instead of a vendor SaaS. Neither stack is baked into every agent rootfs; you attach what you need.
Get started

Ready to give your agent a box of its own?

From $25/mo. BYOK. 30-day refund. Boots in 124ms.

Contact

Annual plans get 2 months free. Every plan ships a 30-day money-back guarantee.